NVD

Id
71455  
Name
CVE-2004-1063  
Description
PHP 4.x to 4.3.9, and PHP 5.x to 5.0.2, when running in safe mode on a multithreaded Unix webserver, allows local users to bypass safe_mode_exec_dir restrictions and execute commands outside of the intended safe_mode_exec_dir via shell metacharacters in the current directory name. NOTE: this issue was originally REJECTed by its CNA before publication, but that decision is in active dispute. This candidate may change significantly in the future as a result of further discussion.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-07-18  
Published
2005-01-10  
Modified Date
2017-07-10  
Seq
2004-1063  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
369530 71455 CVE-2004-1063 CLA-2005:915  View
369531 71455 CVE-2004-1063 GLSA-200412-14  View
369532 71455 CVE-2004-1063 http://www.hardened-php.net/advisories/012004.txt  View
369533 71455 CVE-2004-1063 MDKSA-2004:151  View
369534 71455 CVE-2004-1063 MDKSA-2005:072  View
369535 71455 CVE-2004-1063 http://www.php.net/release_4_3_10.php  View
369536 71455 CVE-2004-1063 HPSBMA01212  View
369537 71455 CVE-2004-1063 20041215 Advisory 01/2004: Multiple vulnerabilities in PHP 4/5  View
369538 71455 CVE-2004-1063 11964  View
369539 71455 CVE-2004-1063 php-safemodeexecdir-restriction-bypass(18511)  View
369540 71455 CVE-2004-1063 USN-99-1  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63199 JVNDB-2004-000541 PHP における safe_mode_exec_dir でのプログラム実行関数の制限が回避される脆弱性 ------------ CVE-2004-1063 9490 CVE-2004-1063 71455 10 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000541.html 2004-12-15 2007-04-01 View